Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7p1u_jtgZX1XhhEFsRELtlDWrkk.roa
File: 7p1u_jtgZX1XhhEFsRELtlDWrkk.roa (raw, json)
Hash identifier: Oo91kPylmz/Ej7Ogb/QYNpdMql9LOFIbwjHRL8xsvNQ=
Subject key identifier: EE:9D:6E:FE:3B:60:65:7D:57:86:11:05:B1:11:0B:B6:50:D6:AE:49
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4046
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7p1u_jtgZX1XhhEFsRELtlDWrkk.roa
Signing time: Sun 14 Apr 2024 06:52:52 +0000
ROA not before: Sun 14 Apr 2024 06:52:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16454 (0x4046)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 06:52:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EE9D6EFE3B60657D57861105B1110BB650D6AE49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:df:29:48:ac:c9:12:a3:b8:37:74:06:4a:
6b:59:e0:aa:0e:f1:5e:37:40:0e:0d:04:ab:b4:dd:
f0:02:a3:91:4b:e3:c3:e3:b4:d1:2c:4c:f7:81:ca:
1b:b8:e2:1c:24:d6:ae:62:49:5e:04:4f:44:d2:cc:
60:cf:db:67:dd:0e:ab:c6:e6:f8:af:8c:37:32:ce:
ed:1d:e9:c3:9e:7c:21:d3:61:d4:08:ec:49:60:5e:
ef:91:ea:c8:5b:08:7d:32:ec:23:09:6f:ab:2a:5a:
15:56:be:10:8c:fe:45:56:31:d6:6e:f3:b0:7f:66:
e5:5f:df:eb:84:7c:be:51:b1:56:ac:c9:9c:5c:24:
a4:3c:1f:11:19:00:32:58:47:a0:0f:9a:06:26:c7:
52:2c:c2:8e:2d:1f:07:ca:37:c4:87:22:dd:e1:f6:
72:df:df:55:8f:84:3e:90:47:62:cc:1c:1f:7e:00:
92:a5:f4:7d:df:9b:e8:22:8b:0b:42:0f:45:38:63:
71:bd:e1:54:8e:9b:d7:71:bf:15:c4:84:fd:b4:b4:
0b:69:04:aa:b2:81:77:12:90:d5:6f:cf:e3:6b:99:
bd:9f:45:47:2f:f5:69:b9:1c:db:5c:d1:19:fe:7a:
7b:a8:4c:cf:2b:72:cc:e4:d1:30:8c:e4:22:1f:ec:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9D:6E:FE:3B:60:65:7D:57:86:11:05:B1:11:0B:B6:50:D6:AE:49
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7p1u_jtgZX1XhhEFsRELtlDWrkk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:d9:b8:a0:03:b4:b6:b6:69:3a:78:e0:b2:21:64:7f:b4:9e:
ba:45:49:64:3f:38:d9:70:1c:fa:82:0b:5d:2d:29:d7:b4:d7:
e9:b7:d6:05:bf:df:af:b3:73:6a:9a:dd:ae:1c:99:19:0d:cd:
20:1b:b9:70:a1:aa:d6:04:d2:d1:7a:1d:31:03:89:37:98:fc:
53:3c:60:9d:64:b8:a7:20:1f:a9:d2:e5:62:5c:99:6d:43:94:
75:0b:c5:9f:b3:e0:58:53:7d:89:28:38:6a:e7:cb:16:48:dd:
14:03:44:d4:5f:95:7b:17:63:c0:52:d7:09:06:8d:b2:10:21:
af:d2:d0:13:5c:e7:f7:e2:29:c1:71:c2:86:eb:92:b5:82:0e:
ed:f4:d9:5f:98:db:f1:21:89:d6:90:5f:d3:2a:10:b5:fb:be:
7b:d8:f2:6d:48:a0:6f:c9:0c:90:c5:ee:d4:99:93:0f:d5:b7:
4c:34:34:87:3e:f4:8e:0a:28:86:54:df:c3:45:4c:04:29:fd:
d9:43:11:6d:3f:fd:ea:ff:be:a1:c1:0b:74:b3:e0:33:56:55:
b3:73:b8:e7:68:57:f5:c4:ca:2c:fa:06:ca:51:70:f8:6d:e7:
f5:cc:a5:59:1d:78:69:21:14:4d:12:54:aa:c0:3c:ff:bf:e5:
48:b4:b3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:18 2024 by rpki-client on console-ams.rpki-client.org